Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/57410984DB6811EEA3A06625C4F9AE02.roa
File:                     57410984DB6811EEA3A06625C4F9AE02.roa (raw, json)
Hash identifier:          dIUYiId8RjG/rRRcBbL4lrgGKfhPhp142Gso46BMRME=
Subject key identifier:   06:DD:A9:EB:92:FD:B3:9B:26:29:99:23:2B:41:DA:69:B7:1F:16:DC
Certificate issuer:       /CN=A9185339/serialNumber=EAA29B3278EA7F2E68AFF3D940FBB5ECA9F8D560
Certificate serial:       02
Authority key identifier: EA:A2:9B:32:78:EA:7F:2E:68:AF:F3:D9:40:FB:B5:EC:A9:F8:D5:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/57410984DB6811EEA3A06625C4F9AE02.roa
Signing time:             Wed 06 Mar 2024 03:19:28 +0000
ROA not before:           Wed 06 Mar 2024 03:19:28 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     152629
IP address blocks:        202.27.206.0/23 maxlen: 24
                          2001:df3:8740::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.crl
                          rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185339/serialNumber=EAA29B3278EA7F2E68AFF3D940FBB5ECA9F8D560
        Validity
            Not Before: Mar  6 03:19:28 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=65e7e0c0-ca4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1e:ce:d8:87:cd:40:87:b2:0d:43:da:d3:65:
                    d2:87:d3:5b:5f:ba:54:d3:77:cb:3e:d7:36:59:dc:
                    ee:e8:f7:98:ac:cc:26:b4:1e:db:9c:11:3a:be:c1:
                    a9:83:06:f2:6a:5b:03:d5:6e:d7:b1:7e:d6:86:59:
                    1e:9f:f3:33:d6:df:7d:98:30:fe:fa:89:33:ad:43:
                    c6:bc:9e:c7:29:a6:ac:14:a8:e5:5d:6c:8b:59:37:
                    f0:80:2b:47:e8:f0:4c:08:d8:13:0e:df:af:bc:8f:
                    32:29:d6:73:b7:94:b7:fc:9a:4d:c6:a8:f8:f8:28:
                    42:59:86:3d:dd:92:c1:63:ab:0a:e8:9c:f9:51:db:
                    3a:05:7a:93:30:c5:1a:4e:ad:88:c2:c0:2a:39:62:
                    ff:35:bc:ac:b7:c1:97:ea:4f:8d:37:ab:04:27:71:
                    df:a9:95:74:0a:43:e2:47:6b:dd:8c:e9:0c:e4:87:
                    2f:14:bf:fb:a7:db:26:9c:d7:d9:38:e1:75:ef:21:
                    66:f9:5e:ae:0c:ea:04:2c:38:45:1c:f0:2b:fa:0e:
                    30:e2:22:29:83:6d:67:98:82:5d:8b:5b:90:35:69:
                    dd:b4:27:59:56:3d:5a:5a:83:f3:28:80:78:88:23:
                    0a:75:76:20:40:e6:10:d2:74:41:62:de:a6:a8:68:
                    78:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DD:A9:EB:92:FD:B3:9B:26:29:99:23:2B:41:DA:69:B7:1F:16:DC
            X509v3 Authority Key Identifier:
                keyid:EA:A2:9B:32:78:EA:7F:2E:68:AF:F3:D9:40:FB:B5:EC:A9:F8:D5:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/57410984DB6811EEA3A06625C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.27.206.0/23
                IPv6:
                  2001:df3:8740::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:20:bc:99:4f:0c:92:3d:3f:67:b8:c1:a7:f2:39:06:da:b4:
         9e:67:c5:f3:29:37:e8:45:af:1d:ba:c3:ec:2e:5b:e5:04:0b:
         17:4f:12:fb:fc:83:50:17:dc:ec:f1:d7:d2:9f:ea:8f:f2:05:
         c3:99:51:b0:de:a6:ba:a8:7b:e4:10:88:69:fe:04:b5:4f:26:
         c4:78:f8:ac:39:00:d9:04:27:b0:55:65:64:df:a9:10:fa:69:
         4c:ea:f0:ef:a7:c6:5d:19:fd:c3:66:8a:bf:49:78:50:4a:68:
         0c:88:c7:0e:38:28:84:1b:61:04:a2:c2:8f:f9:77:e5:cf:72:
         f2:bc:42:41:69:38:e2:76:3c:09:10:b9:30:e0:c0:d8:b4:82:
         55:5e:37:93:9c:42:f1:6b:11:c4:13:11:5f:9e:f2:69:fc:a0:
         e3:df:6f:6d:19:26:73:fb:7c:23:ac:3d:3c:c1:25:d8:32:cc:
         0d:60:64:75:37:86:08:88:47:6e:57:3a:cf:af:d7:1e:5f:84:
         5f:97:97:b5:d9:42:08:72:09:4c:79:20:51:17:ec:28:b7:26:
         ad:28:36:6d:93:72:e3:16:cc:23:6d:76:09:35:91:2b:11:f1:
         71:14:f8:a4:37:77:61:07:81:4c:a2:1e:31:de:9a:6e:79:ea:
         50:92:9d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:27 2024 by rpki-client on console-fra.rpki-client.org